Privacy Notice

Data controller: ReEcho Group Limited, Unit 14 Greenway Farm Bath Road, Wick, Bristol, Gloucestershire, England, BS30 5RL

ReEcho Group Limited (“we”, “us”, “our”, “ReEcho”) collects and processes personal data relating to a network of individuals, businesses and other trusted professionals, including recruiters who we assist with legal, financial and other back-office matters (“Recruiters”), candidates who apply for job opportunities (“Candidates”), and corporate clients who we assist with their hiring processes and matching appropriate Candidates to their job opportunities (“Clients”). We are committed to being transparent about how we collect and use this personal data and to meeting our data protection obligations. 

This Privacy Notice explains how we will process the personal data relating to you, if you are a Recruiter, a Candidate or a Client, when you engage with us, or if you use our website www.reecho.com (“Website”) and the services offered through there. 

Our Website may contain hyperlinks to third party websites (such as LinkedIn and X (formerly Twitter)). These websites operate fully independently from us and have separate and independent privacy policies, which we encourage you to review when you visit those sites. We cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on our Website is not an endorsement.  Should you use any of these websites, such use is at your own risk and we would recommend that you review their respective privacy policies.

Recruiters 

What information do we collect about Recruiters?

We collect a range of information about you. This includes:

  • your full name (where Recruiter is a sole trader), or the name of the Recruiter’s representative(s); 
  • your contact details, including email address and telephone number; and
  • the job title of the Recruiter’s representative(s).

Mostly, we collect this information either directly from you by email or over the phone, from Candidates, from Clients and from LinkedIn. 

We may sometimes collect additional information about you from third parties (including, without limitation, Dun & Bradstreet, Inc., whose privacy notice is available here: https://www.dnb.com/about-us/data-transparency/personal-data.html) who provide details of prospective companies who may be interested in our services.

Your data will be stored on our secure database, which is compiled and hosted between Typeform, Zapier, Hubspot, Juro and Google Drive (our “Subprocessors”) (“Database”).

Why do we process personal data about Recruiters?

We process your contact information in order to perform our obligations under our contract with you, or to take steps towards concluding an agreement with you, including, without limitation, with respect to our legal, financial and other back-office services. 

We may also process your personal data in order to contact you where Clients or Candidates have engaged us to deliver services of the type that you provide. We may also write to prospective Clients and Candidates to let them know about your services.

We have a legitimate interest in processing your personal data to let you know about our services to Recruiter and/or our services to Clients and Candidates. Where we rely on legitimate interests as a lawful basis for processing personal data, we will consider whether or not our interests are overridden by the rights and freedoms of the individuals dealing with us on behalf of Recruiters.

Candidates 

What information do we collect about Candidates?

We collect a range of information about you. This may include:

  • your full name (including title) and contact details, including email and postal addresses and telephone number(s);
  • details of your qualifications, skills, experience, and employment history;
  • information about your current position, including job title, level of remuneration, and benefit entitlements; and
  • any information you decide to provide directly to us, for example on your CV, or when completing forms, or providing your National Insurance number and right to work documentation. 

Mostly, we collect this information either directly from you by email or over the phone, through our online forms, from Recruiters, from Clients or from LinkedIn.

We may sometimes collect additional information about you from former employers, credit reference agencies, the Disclosure and Barring Service, or other background check agencies, but we will always obtain your consent before doing so. 

Your data will be stored on our Database. 

Why do we process personal data about Candidates?

We may process your personal data in order to:

  • operate and maintain a database of Candidates;
  • alert you of opportunities that may be of interest to you; 
  • submit your details to our Clients or Recruiters for consideration; 
  • assist with the completion of any offer letter, employment contract and other incentive documentation with respect to your permanent employment with a Recruiter or Client; and 
  • if you are a contractor or temporary worker, assist with the completion of the contracts for your services to any umbrella company, Recruiter or Client, and to perform any obligations we have under any contract with you (or with any company of which you are a representative). 

We have a legitimate interest in processing your personal data to match you with and/or facilitate your engagement with (i) opportunities appropriate to your skills and experience (whether introduced by us or any Recruiter), (ii) appropriate Clients that have expressed a requirement for the provision of said skills and experience (whether introduced by us or any Recruiter) and/or (iii) Recruiters who can introduce you to such opportunities and Clients.

Where we rely on legitimate interests as a reason for processing data, we consider whether or not those interests are overridden by the rights and freedoms of Candidates and we will only process your personal data where we believe that it does not prejudice your rights and freedoms.

Unless we have obtained your consent in advance, the only personal data we share with our Recruiters and Clients is personal data which you already have made public.

Clients 

What information do we collect about Clients?

We collect a range of information about you. This includes:

  • your full name (where Client is a sole trader), or the name of the Client representative(s); 
  • your contact details, including email address and telephone number; and
  • the job title of the Client’s representative(s).

Mostly, we collect this information either directly from you by email or over the phone, from Recruiters, from Candidates and from LinkedIn. 

We may sometimes collect additional information about you from third parties (including, without limitation, (i) Crunchbase, whose privacy notice is available here: https://about.crunchbase.com/terms-of-service/privacy-policy/ and (ii) Dun & Bradstreet, Inc., whose privacy notice is available here: https://www.dnb.com/about-us/data-transparency/personal-data.html) who provide details of prospective companies who may be interested in our services.

Your data will be stored on our Database.

Why do we process personal data about Clients?

We process your contact information in order to perform our obligations or assist a Recruiter with the performance of their obligations, in each case under a contract with you, or to take steps towards concluding an agreement between us (or a Recruiter) and you.

We may process your personal data in order to contact you where we have matched Candidates or Recruiters appropriate to fill the roles that you require. 

We have a legitimate interest in processing your personal data to let you know about our services and/or the services of our Recruiters, and to match you with Candidates with the appropriate skills and experience for the roles that you require. Where we rely on legitimate interests as a lawful basis for processing personal data, we will consider whether or not our interests are overridden by the rights and freedoms of the individuals dealing with us on behalf of our Clients.

Recruiters, Candidates and Clients 

Who has access to your data?

We keep your information confidential but may disclose it to our personnel (including our consultants, subprocessors or subcontractors) insofar as it is reasonably necessary for the purposes set out in this Privacy Notice, provided that they do not make independent use of the information.  

Countries outside of the European Economic Area (EEA) offer varying standards for the protection of personal data and your privacy rights and in some cases these standards are lower than equivalent EEA standards. When we send your personal data outside the EEA to our Subprocessors, we have in place the EU Commission-approved standard contractual clauses in the form of an appropriate data transfer agreement.

How do we protect your data?

We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

Please be aware that, while we place a high priority on the security of all information that we hold and process and we endeavour to provide robust, commercially reasonable security at all times, no security system can prevent every security breach.

For how long do we keep data?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. 

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or accidental disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, as well as any applicable legal requirements. 

If you would like more information about how long we retain specific personal data, please let us know by email to webmaster@reecho.com.

Your rights

As a data subject, you have a number of rights. You can:

  • access and obtain a copy of your data on request;
  • require us to amend incorrect or incomplete data;
  • require us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing;
  • object to the processing of your data where we are relying on legitimate interests as the legal ground for processing;
  • ask us to stop processing data for a period if data is inaccurate or there is a dispute about whether or not your interests override our legitimate grounds for processing data; and
  • request a machine-readable copy of your personal data which you can use with another service provider.

Please send your requests to webmaster@reecho.com.

We may request specific information from you to help us confirm your identity to ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you believe that we have not complied with your data protection rights, we would encourage you, at first instance, to raise your concerns or complain to us by contacting Peter Gomez, Chief Operating Officer and General Counsel, at peter@reecho.com so that we may make every effort to address your complaint.  Alternatively, you can raise your concerns or complain to the relevant data protection supervisory authority, which in the UK is the Information Commissioner’s Office at https://ico.org.uk/concerns/.

What if you do not provide personal data?

You are under no statutory or contractual obligation to provide any of your personal data to us. However, if you do not provide the personal information requested, we may not be able to provide you with the executive search and professional networking services that we offer.

Children

We do not use the Website to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us at webmaster@reecho.com. We will delete such information within a reasonable time.

Changes to this Privacy Notice

We reserve the right to update this Privacy Notice at any time, and we will provide you with a new version of this Privacy Notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information. This Privacy Notice does not form part of any contract to provide services. 

If you are unsure about how or if this Privacy Notice applies to you, or you have other questions related to the processing of your data, please contact webmaster@reecho.com.